xml: Escape